MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

ImpactCritical Sandbox Escape & Server Takeover:A critical security vulnerability exists in mcp-run-python due to a lack of isolation between the Python runtime Pyodide and the host JavaScript environment.The runPython and runPythonAsync functions execute Python code using Pyodide without...

PT-2019-11596

Name of the Vulnerable Software and Affected Versions: rkt versions prior to 1.30.0 Description: The issue allows compromised containers to potentially access host resources due to a lack of isolation for processes run with rkt enter. This occurs because processes run with rkt enter are given all...

PT-2019-11598

Name of the Vulnerable Software and Affected Versions: rkt versions prior to 1.30.0 Description: The issue allows compromised containers to access host resources due to a lack of isolation for processes run with rkt enter. This occurs because processes run in this manner are not limited by cgroup...